Security Intelligence
Public PoC available for 7‑Zip memory corruption flaw
A high-severity flaw in 7-Zip (CVE-2026-48095) exposes systems to potential code execution via malicious archive files,...
Security Intelligence
Public exploit code available for Apache Tomcat clustering flaw
A recently disclosed Apache Tomcat vulnerability, CVE-2026-34486, exposes clustered deployments to remote code...
Security Intelligence
Trend Micro Apex One flaw enables post-compromise code distribution across endpoints
Trend Micro disclosed and patched CVE-2026-34926, an actively exploited directory traversal vulnerability in Apex One,...
Security Intelligence
Actively exploited LiteSpeed cPanel flaw enables root access
A critical vulnerability in the LiteSpeed cPanel plugin is actively exploited and allows low-privileged users to gain...
Security Intelligence
Maximum-severity UniFi OS vulnerabilities enable full network takeover
Patches for three max-severity UniFi Operating System flaws allowing unauthenticated remote access to network...
Security Intelligence
Cisco Secure Workload API flaw creates cross-tenant exposure risk
A critical vulnerability (max CVSS score) in Cisco Secure Workload allows unauthenticated actors to gain Site Admin...
Security Intelligence
Leaked Shai-Hulud malware fuels wave of npm credential theft campaigns
Threat actors are escalating the Shai‑Hulud campaign by combining leaked malware code with compromised npm packages,...
Security Intelligence
Microsoft Exchange Server flaw actively exploited, no patch available
Microsoft has reported active exploitation of a high-severity vulnerability in on-premises versions of Microsoft...
Security Intelligence
Apache HTTP/2 flaw exposes unpatched servers to possible code execution
Apache HTTP Server vulnerability CVE‑2026‑23918 exposes unpatched systems to denial of service and, in some...
Security Intelligence
Microsoft Office update fixes Word RCE triggered via Outlook emails
Microsoft’s Patch Tuesday updates address a Microsoft Word RCE vulnerability that can be triggered through Outlook when...
Security Intelligence
Critical Exim flaw enables remote code execution on GnuTLS builds
Exim released a security update, 4.99.3, to fix a critical vulnerability that can allow unauthenticated remote...
Security Intelligence
Canvas login portal incident led to widespread disruption
How the Canvas incident disrupted academic operations globally and what institutions should watch for next, including...